CVE-2004-1324
2.6 · LOWOverview
CVE-2004-1324 is a low-severity vulnerability affecting microsoft windows_media_player. It was published on December 18, 2004 and has a CVSS 2.0 base score of 2.6 (LOW).
This vulnerability has a CVSS 2.0 base score of 2.6, rated LOW. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
Technical Description
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
Remediation
Check the references section for vendor advisories and patches from microsoft. Update windows_media_player to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|
Frequently Asked Questions
What is CVE-2004-1324?
CVE-2004-1324 is a low-severity vulnerability affecting microsoft windows_media_player. It was published on December 18, 2004 and has a CVSS 2.0 base score of 2.6 (LOW).
How severe is CVE-2004-1324?
This vulnerability has a CVSS 2.0 base score of 2.6, rated LOW. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2004-1324?
Check the references section for vendor advisories and patches from microsoft. Update windows_media_player to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2004-1324?
CyberStrike's AI-powered security agents can automatically detect CVE-2004-1324 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related LOW CVEs from 2004
View all →netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwr
A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the P
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR env
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code vi
GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to
Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via
4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink att
Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and ea
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world
Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to cre
IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite file
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions ac